REMARKS 

This Preliminary Amendment cancels original claims 1 to 10, and adds new claims 
1 1 to 20 in the underlying PCT Application No. PCT/DE03/00523. The new claims conform the 
claims to the U.S. Patent and Trademark Office rules and do not add new matter to the application. 

In accordance with 37 C.F.R. § 1.125, the Substitute Specification (including the 
Abstract, but without the claims) contains no new matter. The amendments reflected in the 
Substitute Specification (including the Title and Abstract) are to conform the Specification and 
Abstract to U.S. Patent and Trademark Office rules or to correct informalities. As required by 37 
C.F.R. § 1.121 and § 1.125, a Marked Up Version Of The Substitute Specification comparing the 
Specification of record and the Substitute Specification also accompanies this Preliminary 
Amendment. In the Marked Up Version, underlining indicates added text and "strike-throughs" and 
double-brackets indicate deleted text. Approval and entry of the Substitute Specification (including 
Abstract) is respectfully requested. 

Also enclosed is a translated copy of the International Search Report dated June 25, 

2003. 

It is asserted that the subject matter of the present application is new, non-obvious, 
and useful. Prompt consideration and allowance of the application are respectfully requested. 
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PROTECTIVE DEVICE FOR A VEHICLE 

Background Information 

5 

FIELD OF THE INVENTION 

The present invention is directed to a protective device for a vehicle according to the 
definition of the s pecies in the independent claim . 

BACKGROUND INFORMATION 
10 A safety device for motor vehicles is known from Offenle g ungsschrift DE 199 60 179 

Aj- rdescribed in German Published Patent Applic ation No. 199 60 179. The motor vehicle has 
one airbag or multiple airbags in this case which can be deactivated via ^switching 
means arrangement . The switching means ar e design e d arrangeme nt is configured here in the 
form of a deactivation switch. 

15 

Advantages of the In vention 
SUMMARY OF THE INVENTION 

TheA protective device for a vehicle according to an exemplary embodiment of the present 
invention having the features of the independent claim has the advantage over the related art 

20 in that , in addition to analyzing the switch position using a processor, another module for 

analyzing the switch position is present which functions mav function independently from the 
processor. A hardware redundancy is may thereby be established. For its function, this module 
advantageously has mav have at least one logic module. It is possibl e to provide d e la v Delav 
times and hold times of any length may be provided for the module 1 ^ logic state time-variant 

25 approaches by using such logic modules. Tolerances aremav now be irrelevant due to the use 
of logic modules. Long delay times and hold times of a few hundred milliseconds are 
easU vmav be implementable due to the use of logic modules. 

The measures and refinements cited in the dependent claims make advantageous 
improvements on the protective device for a vehicle cited in the independent claim possible. 
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It is particularly advantageou s that the The at least one logic module is designed mav be 
configured as a gate and/or as a flip-flop. In order to make To determine the particular length 
of the delay times and hold times of the module-'s logic state possible, a combination of 
different gates and flip-flops may be provided. A Thus. freeze-in of the logic result m 
5 particular is thus possibl e mav be provided . 

Furthermore, it i s advantag e ous that the at least one logic module is mav be configured m 
such a way go that a time response of the logic module 1 ^ logic state is variable. This may be 
carried out in particular , for example, via the processor, which, however, exerts mav exert no 
influence on the module-'s analysis of the signal from the switch. The time response refers to 
10 the delay times and the hold times of the logic state. 

Furthermore, it is advantageous that the switch is designed mav be configured either as a 
resistor network or as at least one Hall sensor. These are mav be two reliable circuit concepts 
for a switch. 

In addition, it is advantag e ous that the power supply of the switch is mav be provided either 
15 from the control unit, e.g., for the restraint systems, i.e., the protective device, or that an 

external power supply of the switch is mav made be available which makes to make a direct 
connection to the vehicle batter y possible . 

Finally, it is also advantageous that an AND gate Is m ay be provided, gating together a signal 
of the module and a signal of the processor, so that only in the case of a logic 1 of both inputs 
20 is a new output signal of the module relayed. 

Drawing 

Exemplary e mbodiments of the present invention ar e illustrated in the drawing and ar e 
25 explained in greater detail in the description b e low. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 shows a first block diagram of the protective device according to an 

exemplary embodiment of the present invention^-an^ 
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Figure 2 shows a second block diagram of the protective device according to an 

exemplary embodiment of the present invention. 



D e scription 
5 DETAILED DESCRIPTION 

In today-'s vehicles the possibility is provided for deactivating the passenger-side airbag or 

the rear side airbags may be de activated using a switch, i.e., an airbag deactivation switch. 

For this purpose, the position of a key switch, for example, is mav be analyzed by the airbag 

control unit. Different concepts are possible may be provided for implementing the switch. 

1 0 Switches, having resistor networks where the switch switches between two different resistor 

dividers, and switches made up of one or two Hall sensors are commonly m ayibe used. These 

are may be switched without contact, which resutemav result in high mechanical robustness. 

Since the airbag deactivation function ismav be safety-critical, the analysis in the airbag 
control unit i s normally de s iened mavbe configured to be redundant. Analysis of the switch 

15 position and activation or deactivation of the airbag(s) are normally m ayibe carried out via 
software and via a hardware path which is mav be independent from the microcontroller. 
Depending on the switch position, testhe hardware path or module mav additionally 
activates activate or d e activates deactivate the respective restraining means — arrangement — 
triggering circuits for airbags, seatbelt tensioning devices, or other restraining 

20 means arrangements such as, for example, an electromagnetic valve for a roll bar via the 

hardware, thereby ensuring that erroneous triggering of the respective triggering circuits 
Ismav not possible occur , even in the event of a defective microcontroller. 

The required hardware path or modules must p e rformm av re quire the p erfor mance of the 
following functions: 

25 - Analyzing the signal lines of the deactivation switch^ 

- Filtering the signals, 

- Processing the signals^ 

- Detecting and handling errors, i.e., a defect in the switch, interruption of the battery 
supply^ 

30 - Determining default states after switch-on, 

- Defining the time response: timeouts, hold times, and delays. 
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- Activating or deactivating the defined triggering circuits via hardware intervention^ 

- Responding to switch-off of the airbag control unit. Attention should be paid to the 
feeifeature that, after the battery supply is switched off, the control unit may still 
draws draw power for some time from its own power reserve. 

5 Possible implem e ntation s of this The module in the airbag control unit aremav be 

implemented as discrete circuits having operational amplifiers and/or comparators for 
processing the respective input signals of the airbag deactivation switches, and for triggering 
suitable activation circuits and deactivation circuits. 

Activation and deactivation of the restraining meaBsarran gem en t may take place in different 
10 ways: 

- Switching on and off the supply voltage of the respective triggering circuit IC"s 4 

- Switching on and off the trigger voltage supply for the respective triggering circuits^ 

- Interrupting the triggering circuits, shorting the triggering circuits to ground, or shorting 
the ignitor^ 

15 - Intervening in the logic control of the triggering circuits, in or at the triggering circuit IC. 

Signal filtering and time response of the circuit during normal operation, as well as in the 
event of an error, aremav be implemented by suitable circuit elements. RC elements are 
possible mav be provided here, but they have disadvantage s . Such disadvantages 
afeamdesired features, incl uding, for example time invariance^ir^e^g., only a certain time 
20 response is possiblei mav be provided), it is may not be possible to differentiate between 
different operating states; there aremav be relatively great tolerances; dimensioning, 
availability, and the size of resistors and capacitors ay emay be limited, and in particular, delay 
times and hold times longer than a few hundred milliseconds are mav be difficult to 
implement. 

25 According to an exemp lary embodiment of the present invention, the redundant hardware 
path tsmav be implemented by using logic modules. Such logic modules mj^include gates 
and flip-flops, i.e., multivibrator circuits. These may make it possible to achieve time-variant 
approaches with delay times and hold times of any length. The microcontroller or processor 
may assume the time control of the logic modules. In this case, however, the processor 

30 tosmav only th e possibility to control the time response of the module for analyzing the state 
of the airbag deactivation switches, but not the state of the restraining means arran gement 
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activation or restraining meafts arraneement deactivation. This ismav be important to preserve 
the concept of redundancy. 

Figure 1 shows the protective device according to an exemplary embodiment of the present 
invention in a first block diagram. The protective device according to the exemplary 
5 embodim ent of the present invention has an airbag deactivation switch 1 and an airbag 

control unit 4 which are connected to one another. Airbag deactivation switch 1 has two Hall 
sensors 2 and 3 which are interconnected on an electrode where they receive power from 
control unit 4 and a current limiter 6. Current limiter 6 itself is supplied by battery voltage 5. 
On the other side, Hall sensor 2 is connected to two components of control unit 4. One is a 
10 module 7 which includes the voltage supply, communication interfaces, analog inputs, and an 
analog-to-digital converten-4he . The other is a module 8 which processes and analyzes the 
signal of Hall sensor 2. Processing of the sensor signals forks into two paths here. The 
digitized Hall signal is transmitted to microcontroller 9 via module 7, the microcontroller 
processing the signal to determine whether the deactivation switch has been operated or not. 
15 At the same time, module 8 performs the same procedure, module 8 also having access to an 
analog-to-digital converter in order to execute a digital analysis. The other electrode of Hall 
sensor 2 is also connected to module 7 and module 8 to make provide redundant processing of 
the Hall sensor signals possible here also . 

Processor 9 activates or deactivates the deployment of the restraining meam arrangement via 
20 software according to the switch position of deactivation switch 1. One or both Hall sensor 
signals are filtered and analyzed in module 8. This is followed by triggering of safety 
semiconductor 13 via hardware for activating or deactivating the appropriate triggering 
circuits. However, block 10 and block 1 1 are also switched between these two procedures. 
Block 10 enables the activation of the airbag triggering circuits as a function of the status of 
25 the deactivation switch and combines this with an additional enable signal from processor 9r 
Thio makes it po s sible not£ to enable airbag output stages 12 by processor 9 before, in the 
event of a crash, deployment should indeed take place, regardless of whether the deactivation 
switch is in the "on" or "off position. However, due to block 10, microcontroller 9 has the 
possibility to mav activate output stages 12 via safety semiconductor 13 only when 
30 deactivation switch 1 is also in the "on" position. If deactivation switch 1 is in the "off 

position, then output stages 12 are deactivated independently of the processor enabling line to 
block 10. Particularly in airbag control units having a DC ignition, this function 
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represents mav represent an additional protection against erroneous deployment in the event 
of defects in output stage IC 12. It i s alternatively po s sible to omit block lO. Alternativelv. 
block 10 mav be omitted. The output signal of block 10 is supplied to a block 1 1 which 
represents a logic circuit unit and which may be implemented using flip-flops. This block 
5 enables storage and freezing-in of the deactivation switch state. The storage is volatile, i.e., it 
is not preserved when the airbag control unit is switched off. Processor 9 has th e possibility 
te mav control whether the logic state of safety semiconductor 13 and thus the activation or 
deactivation of the respective airbag triggering circuits 15 through 18 is frozen, thereby 
becoming independent of possible changes in the switch position of deactivation switch 1, or 

10 whether each change in the switch position instantaneously results in activation or 

deactivation of airbag triggering circuits 15 through 18. Here again, it is mav be important that 
processor 9 is only able to freeze-in the state of safety semiconductor 13, but has no bearing 
on the state itself. Varied and very flexible options for controlling the analysis of deactivation 
switch 1 may_arise from this concept of logic storage or freezing-in of the state of the 

1 5 hardware path, such as: 

- any hold times or delay times ar e possible mav be provided , 

- in the event of an error, a crash, or a power reserve problem, the state of the hardware path 
may be frozen, 

- it ismav be possible to control whether the state of deactivation switch 1 is read in and 

20 received only once at the start of a closing cycle, or whether a change in the switch position 
is permissible at any time. 

As mentioned before, block 1 1 is connected to safety semiconductor 13, which is in turn 
connected to power reserve 14 and output stages 12. Power reserve 14 is normally at least 
one capacitor which, in the event of an interruption of the battery connection, supplies power 
25 for a certain amount of time for continued operation. Processor 9 is directly connected to 

output stages 12 via a data output to control the output stages via software. Output stages 12 
are connected to triggering circuits 15 through 18, respectively. As described above, 
processor 9 itself is connected to block 10 via an enable line to establish an AND gate, as 
well as to block 1 1 to influence the time response. 

30 Safety semiconductor 13 is normallv mav be a transistor switch. 

The protective device according to an exemplary embodiment of the present invention ha s the 
advantage that it is mav be independent of the desk*n configuration of deactivation switch 1, 
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i.e., it does may not matter whether it is a resistor network or one or two Hall sensors. 
Furthermore, the protective device is independent of the type of supply of deactivation switch 
1. It is also independent of whether the hardware path analyzes only one Hall sensor and/or 
one resistor network, or two or multiple Hall sensors and/or resistor networks. It is may 
5 furthermore ^independent of the type of restraining memsarraneement to be deactivated. 

: F&eAn exemplary embodiment of the present invention is may also bejndependent of the type 
of deactivation of the restraining means, i.e., whether it is a question of switching on and off 
the supply voltage of the respective triggering circuit IC^'s, or switching on and off the trigger 
voltage supply, or interrupting the triggering circuits, or shorting the triggering circuits, or 
10 intervening in the logic control of the triggering circuits. The present invention is also 

independent of whether the position of deactivation switch 1 is input in the software part via a 
separate IC or directly by the microcontroller, i.e., there is an A/D converter in the 
microcontroller itself. The order of blocks 10 and 1 1 may also be exchanged. 

Figure 2 shows a second block diagram of the protective device according to an exemplary 
15 embodiment of the present invention. Except for the power supply of deactivation switch 19, 
deactivation switch 19 and control unit 21 have the same elements. A current limiting unit 20 
or fuse is situated arranged directly at deactivation switch 19, thereby externally supplying the 
deactivation switch. The other elements are situated arranged and indicated exactly as in 
Figure 1. 
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AksteteiABSTRACT OF THE DISCLOSURE 
A protective device for a vehicle is described which is deactivatable by a switch, the state of 
the switch being analyzable by a processor in a control unit and by an independent hardware 
path. The independent hardware path has at least one logic module which makes the setting 
of delay times highly flexible. 



(Figure 1) 
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